Earlier  
Posted Nick Remark
#openstack-nova - 2017-02-08
14:15:06 johnthetubaguy I think
14:16:14 johnthetubaguy hmm, I guess I don't understand the state of the system
14:16:28 johnthetubaguy it looks more like placement is not returning any hosts, I could be wrong
14:16:48 owalsh johnthetubaguy: I don't see any POST requests in the placement api log
14:17:07 cdent EmilienM, johnthetubaguy: I'm back, catching up. which is the best log to start with?
14:17:36 johnthetubaguy owalsh: yeah, compute logs say its not configured in the compute log, at least in the one I am looking at
14:17:53 johnthetubaguy owalsh: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_34_01_297
14:18:20 owalsh johnthetubaguy: service isn't up yet
14:18:45 johnthetubaguy but thats a different log
14:19:06 johnthetubaguy I still see error here, looks like its configured by not able to reach it maybe
14:19:07 johnthetubaguy http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_43_28_610
14:19:25 johnthetubaguy owalsh: we look at the public endpoint in the service catalog for placement, in case that helps
14:19:35 cdent this is an error we were seeing a while back: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_34_19_311
14:19:58 johnthetubaguy been looking at stuff with openstack-ansible folks last week, so wondering if its similar
14:23:22 owalsh johnthetubaguy: looks like it's created at 06:37:11 http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/keystone/keystone.txt.gz#_2017-02-08_06_37_11_641
14:25:29 owalsh johnthetubaguy, cdent: and no more errors about the endpoint after this
14:25:37 owalsh http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_38_22_609
14:27:22 sfinucan sdague: nova-dhcpbridge only makes sense with nova-network, correct? https://linux.die.net/man/1/nova-dhcpbridge
14:31:12 EmilienM cdent, johnthetubaguy, owalsh: could it be something in nova.conf [placement] ?
14:31:35 cdent EmilienM: maybe
14:32:15 EmilienM cdent: the thing it, when we deploy nova from ocata-3, it works fine. Let me show you tripleo logs from our CI where nova trunk is not used
14:32:37 johnthetubaguy are those placement credentials passing the placement is_admin check, for example?
14:33:12 EmilienM cdent: http://logs.openstack.org/47/430447/1/check/gate-tripleo-ci-centos-7-nonha-multinode/dd43509/logs/subnode-2/var/log/nova/nova-placement-api.txt.gz#_2017-02-07_23_06_08_825
14:33:15 johnthetubaguy EmilienM: thats probably just after we starting asking placement which host to use, potentially
14:33:24 EmilienM cdent: that is a CI job that doesn't run nova from trunk, but nova from ocata-3
14:33:59 EmilienM johnthetubaguy: what is is_admin check ?
14:34:07 cdent EmilienM: can you enumerate what's different on the tripleo side, besides the switch to using nova-api with eventel (if anything)?
14:34:19 EmilienM oh is_admin in keystone
14:34:19 mordred sdague: something like this: https://review.openstack.org/430967
14:34:30 johnthetubaguy EmilienM: placement logs didn't show any 403s so I am wrong, I was thinking is it an admin user
14:34:41 Guest94046 johnthetubaguy: yep, o3 won't break without placement
14:38:08 EmilienM cdent: what do you want to know exactly?? the diff between the 2 jobs? or the history of what we changed recently?
14:40:30 cdent EmilienM: I'm not sure. It would just be useful to be able to figure out what if anything may have impacted what's going on.
14:40:45 EmilienM the major thing is that we switched back to eventlet
14:42:58 dansmith EmilienM: not for n-cpu which is where this problem is, right?
14:44:03 EmilienM dansmith: I'm afraid I don't understand the question. We switched Nova API to not run in WSGI with apache, but run in classic eventlet. What are you asking about nova compute?
14:44:35 dansmith EmilienM: the problem is that nova-compute is not reporting into placement for the subnode right?
14:44:44 johnthetubaguy FWIW, this error log on the first compute node seems odd to me, not sure if thats normal: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_43_11_488
14:44:48 EmilienM cdent: in the logs, I see "Placement service credentials do not work." 3 times but not more so I guess it could register at some point?
14:45:16 mriedem johnthetubaguy: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_43_11_488 is 'normal'
14:45:23 mriedem we should probably drop that down from an error
14:45:26 EmilienM dansmith: the subnode is a single node overcloud, consider it as a all-in-one node
14:45:40 cdent EmilienM: there's no evidence that the placement application has ever been contacted (in the web logs), unless I'm looking at the wrong ones
14:45:49 mriedem johnthetubaguy: https://github.com/openstack/nova/blob/d48aeb5783ea9bd9495eb2e7c67bc587dfd7d85d/nova/compute/manager.py#L6597
14:45:56 EmilienM dansmith: node1 == undercloud, which is completely another story (and by the way, undercloud can deploy the overcloud fine in OVB jobs, that run Nova / Ironic)
14:45:57 dansmith the passwords in the two nodes for placement look very different
14:46:19 EmilienM dansmith: yeah don't look at subnode1 please
14:46:27 dansmith alright
14:46:29 EmilienM dansmith: that's another instance of nova, that we don't use in this case
14:46:42 EmilienM subnode2 is the only logs we should look today
14:46:57 EmilienM http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/
14:47:15 johnthetubaguy mriedem: OK, I clearly have less understanding of how this works than I thought
14:47:22 openstackgerrit Balazs Gibizer proposed openstack/nova master: Improve assertJsonEqual error reporting https://review.openstack.org/428199
14:47:23 dansmith oh, I'm not looking at subnode1
14:47:28 dansmith I'm looking at -2
14:47:33 EmilienM ok good
14:47:43 dansmith or are you calling the primary node "subnode1" ?
14:48:21 EmilienM so: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/var/log/nova/ is the undercloud and please don't look at it we don't care now
14:48:36 EmilienM http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/ is overcloud, and we currently can't spawn a VM on it
14:48:49 johnthetubaguy according to placement, its only ever been reached by the scheduler I guess
14:48:53 EmilienM FYI I'm using https://review.openstack.org/#/c/430571/ for testing
14:49:26 cdent johnthetubaguy: yes (I was looking at the main logs when I saw no activity above, not the subnode-2, but subnode-2 is just hearing from the scheduler)
14:49:41 johnthetubaguy I just wish we had more details on why compute isn't able to talk to placement in here: http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_43_28_610
14:50:20 cdent johnthetubaguy: shortly before that; http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-compute.txt.gz#_2017-02-08_06_40_24_634
14:50:33 dansmith ot
14:50:42 dansmith it is clearly hitting placement because it's getting Unauthorized right?
14:51:02 dansmith which means that the service catalog is working, and that the credentials just aren't right I think
14:51:16 dansmith unless it's hitting placement for the undercloud somehow, but I doubt it
14:51:34 cdent dansmith: where is unauthorized happening?
14:51:41 EmilienM dansmith: our current CI jobs (pin to nova-ocata-3) use the same credentials, and it seems to work. I can give you a link so you can confirm
14:51:55 dansmith cdent: https://github.com/openstack/nova/blob/master/nova/scheduler/client/report.py#L70-L76
14:52:02 dansmith cdent: that's the message in the logs, yes?
14:52:03 johnthetubaguy EmilienM: it is probably just silently failing
14:52:25 johnthetubaguy EmilienM: would wouldn't notice anything wrong if compute couldn't ever talk to placement until after ocata-3
14:52:39 EmilienM ok now i'm checking our haproxy config, etc to make sure placement api is reachable
14:52:50 dansmith cdent: placement access log is completely empty on the undercloud?
14:53:01 EmilienM yeah
14:53:06 EmilienM please don't look undercloud for multinode jobs
14:53:11 EmilienM nova is not used to spawn the overcloud
14:53:14 johnthetubaguy dansmith: its odd we don't see 401 in the placement logs, or is that normal?
14:53:16 EmilienM we use nodepool to spawn the subnode2
14:53:20 dansmith johnthetubaguy: I dunno
14:53:39 cdent ks_exc.Unauthorized means two things
14:53:43 EmilienM if you want to read logs from a real undercloud that spawns an undercloud, please look OVB jobs: https://review.openstack.org/#/c/430571/
14:53:46 mordred cdent: of course it does
14:53:48 johnthetubaguy I wonder if its not actually got the correct url from the service catalog, or maybe it just can't talk to keystone to get it?
14:53:55 dansmith johnthetubaguy: placement access log on the undercloud is zero bytes, but we do have a few gets in the overcloud log
14:53:55 cdent one of them is entirely driven by code, not a response from anything
14:53:59 cdent mordred: ikr
14:54:17 johnthetubaguy dansmith: looks like they are the scheduler calls that work, yeah
14:54:31 johnthetubaguy dansmith: well the empty list would give us the no-valid host error I think
14:54:44 EmilienM I don't think it can comes from HAproxy because nova-placement-api log file exists, so API was reached
14:54:58 EmilienM it can be in credentials, I'm checking now.
14:55:10 dansmith actually, placement access is not zero bytes, it just looks empty
14:55:16 EmilienM johnthetubaguy: you said you checked in keystone logs, did you see something?
14:55:32 johnthetubaguy EmilienM: I haven't looked there, was looking at placement
14:55:52 cdent EmilienM: I'm pretty sure when apache starts it opens the log file, but only when the wsgi application is requested to, will it write and when it does the error log should get a bunch of oslo config noise
14:56:23 EmilienM cdent: right, and it's used, see http://logs.openstack.org/71/430571/1/check/gate-tripleo-ci-centos-7-nonha-multinode/bae4746/logs/subnode-2/var/log/nova/nova-placement-api.txt.gz#_2017-02-08_06_40_29_306
14:56:58 cdent too many different log files! ;)
14:57:07 mriedem i second that

Earlier   Later